Privacy Notice

We act as controller for account, billing and website data. For the business data you upload into your workspace (broker, ACE, ERP files, portfolio entities), we act as processor on your instructions and process it only to provide the service.

• Account data (first name, last name, email, password hash, role, workspace membership): to create and secure your account and manage seats. Legal basis: performance of a contract.
• Subscription data (plan, status, renewal dates, seat counts, order references from Paddle): to provide entitlements and manage billing. Legal basis: contract and legal obligation.
• Content and uploads (regulatory feed links, imported files, portfolio entities, notes, approvals): to deliver the service you configure. Legal basis: contract.
• Audit and change history (who changed what, when, approvals and decisions): to provide the audit trail feature and to protect against misuse. Legal basis: contract and legitimate interests.
• Usage and technical data (log records, device and browser data, IP address, error reports): for security, fraud prevention, troubleshooting and product improvement. Legal basis: legitimate interests.
• Support messages: to answer your questions. Legal basis: contract and legitimate interests.
• Marketing emails, where you opt in: legal basis is consent, withdrawable at any time.

Card details are never collected or stored by us. Payment data is collected and processed by Paddle as Merchant of Record.

• Merchant of Record: Paddle.com, for sale of the product, subscription management, payments, tax compliance and invoicing.
• Service providers and subprocessors: cloud hosting and database, transactional email delivery, error monitoring and analytics, and AI model providers used for regulatory summarisation. They act on our instructions under written contracts.
• Your workspace: admins in your workspace can see member names, emails, roles and audit entries.
• Professional advisers (legal, accounting) and authorities where required by law or to establish or defend legal claims.

We do not sell personal data.

Data may be processed outside your country, including in the United States and the European Union. Where data leaves the UK or EEA, transfers rely on adequacy decisions or Standard Contractual Clauses with appropriate supplementary safeguards.

Account and workspace data is kept while your subscription is active and for up to 30 days after termination, after which it is deleted or anonymised, except: billing records kept for the period required by tax law (typically 7 years), and audit or change history kept for up to 7 years to preserve the integrity of the compliance trail. Security logs are kept for up to 12 months.

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, to data portability, to withdraw consent, and to lodge a complaint with your supervisory authority. Under UK and EU GDPR we respond within one month. Contact legal@plumeria.app to exercise any right. We will not discriminate against you for exercising them.

We apply appropriate technical and organisational measures, including encryption in transit, access controls and row level authorisation so members only reach data they are entitled to, private storage for uploaded files with time limited download links, role based permissions, and logging of changes. No system is completely secure, so we cannot guarantee absolute security.

We use strictly necessary cookies and local storage to keep you signed in and to remember workspace preferences. Any analytics cookies are limited to understanding aggregate product usage. You can clear or block cookies in your browser, though sign-in will not work without the essential ones. We do not use advertising cookies.

We will update this notice as the service evolves and will notify you in the app or by email of material changes before they take effect.